Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48cd169-d456-4d40-abbf-bbdf7ede92be.roa
File:                     d48cd169-d456-4d40-abbf-bbdf7ede92be.roa (raw, json)
Hash identifier:          oEJbPDOcl3X9A9cwsKo73b+UNtLXY8z3lah6ZRv70P4=
Subject key identifier:   0A:58:6E:F9:A9:7E:09:04:3E:D1:DD:1E:33:5D:14:E4:8A:EA:A7:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AC2BADFD4470FE29565BA0A286A542638D18767
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48cd169-d456-4d40-abbf-bbdf7ede92be.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:80c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c2:ba:df:d4:47:0f:e2:95:65:ba:0a:28:6a:54:26:38:d1:87:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ec145b694545b398cb6bc461f3a536afd841420181d47e367a478e37dcbba0b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:b6:55:4b:04:5b:e7:21:0b:98:0a:27:ad:
                    39:64:2e:ad:71:1b:ca:5c:fb:60:7f:1d:d5:c3:20:
                    c0:22:d8:8f:87:4d:a1:be:bb:86:0f:70:77:1b:82:
                    ea:8b:bf:3f:6d:6e:aa:f9:fd:77:6f:a7:dd:10:cf:
                    1b:9c:60:3b:1e:00:ef:c9:8e:11:93:31:81:87:de:
                    e9:8e:d7:89:dd:f7:43:d0:57:dc:d4:35:26:96:b7:
                    a3:7d:c7:03:60:9e:9c:c0:45:69:79:93:e2:b4:dd:
                    f8:a2:07:0f:49:2f:c2:71:ca:d7:f6:22:76:9c:80:
                    1a:94:8c:bd:72:90:e4:9d:08:88:7c:81:65:b0:91:
                    30:92:aa:94:5e:4d:ba:4f:4f:f8:b2:d5:f7:02:50:
                    98:cb:19:d1:9d:78:1c:2c:b3:21:0a:82:cb:cb:1f:
                    cc:8a:3c:a8:f9:9e:8e:ff:81:7c:ab:1e:6c:2b:28:
                    d0:fe:9d:59:23:8a:d0:2e:79:94:32:ce:5d:cc:c1:
                    7e:b1:93:8c:ba:26:ba:c8:1e:97:09:b7:0c:38:4b:
                    80:6a:f5:f1:90:98:6a:bd:83:d6:fb:09:b7:b3:ec:
                    66:87:31:61:10:8e:e9:78:75:68:98:88:31:33:69:
                    5f:11:70:a6:45:28:b2:13:e3:a5:ff:2d:b8:ca:5e:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:58:6E:F9:A9:7E:09:04:3E:D1:DD:1E:33:5D:14:E4:8A:EA:A7:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48cd169-d456-4d40-abbf-bbdf7ede92be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:f4:b3:aa:32:4b:ae:57:83:45:97:f0:21:43:58:83:5b:
         a4:36:12:c5:39:c1:e5:fe:d4:78:06:2c:41:dc:d7:3d:73:3c:
         27:9b:28:64:0b:7c:48:39:5c:14:8a:c6:99:c4:0b:54:aa:30:
         3f:db:02:c5:54:29:cc:2c:07:e0:5c:a8:f3:71:b5:95:28:df:
         73:97:c2:6b:a7:a5:0d:89:ed:a8:68:bb:36:fb:e6:23:c5:40:
         64:9e:4e:94:01:1a:38:b4:50:bd:e0:5b:ee:fc:24:54:e1:3b:
         c9:48:ec:9f:96:74:9a:f1:33:10:79:da:f3:a2:4e:31:62:9d:
         39:a5:26:36:90:b2:5e:cc:b1:d4:2d:e6:a8:9c:73:8c:b8:8f:
         7a:56:56:82:94:d4:27:0e:a8:a1:64:b6:71:b4:f8:cc:97:02:
         09:52:cd:29:db:0e:15:a2:5c:ab:e4:a7:55:cd:4d:ea:fa:87:
         27:5a:0d:65:f1:d6:ee:d3:00:17:f8:4b:ca:f6:d2:6a:47:0e:
         f8:4d:0c:04:4c:57:bf:41:4d:15:fe:99:5a:bf:c9:7d:d7:e8:
         28:23:63:76:f9:14:d3:1e:f9:b7:92:cb:76:11:63:8a:44:45:
         15:b2:f3:dc:ce:90:57:8b:06:b0:d8:07:30:c5:ae:6c:8a:dc:
         20:b2:88:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----